Vulnerability assessment
Know every weak spot.
Exploit none.
A full assessment of your hosts and services that verifies every issue without exploiting anything. Run it monthly instead of once a year.
Monthly VA · 24 hosts
Vulnerability Assessment Only · no exploitation
Hosts24
Open services61
Known CVEs17
Critical2
CriticalVPN gateway with a critical remote code execution CVE10.0.0.4
HighDatabase port open to the internet203.0.113.11
MediumTLS 1.0 still accepted203.0.113.10
What it does
- DiscoveryEvery exposed port and service on the hosts you list.
- Known vulnerabilitiesChecks for known vulnerabilities across your hosts and services.
- TLS and web serversProtocols, cipher suites, certificates and server configuration.
- Zero exploitationNo denial of service, brute force, credential stuffing or data exfiltration.
- Ranked by CVSSEvery verified issue scored so you fix the worst first.
- Gaps namedAnything that could not be checked is listed with the reason.
What you get
- A verified, ranked list of weaknesses
- CVSS 3.1 scores and CWE references
- A report you can show customers
- Findings in the shared tracker with SLAs
Mapped to
- CVSS 3.1
- CWE
- CVE
How it works
- List the hostsHosts or ranges, up to 256 per scan.
- Leave assessment onVulnerability Assessment Only verifies without exploiting.
- Schedule itRun it monthly and watch the trend.
Documentation
Read the details
Setup, every option and the API, on docs.cerberon.dev.
Common questions
Is a vulnerability assessment safe for production?
It verifies without exploiting and runs no denial of service, brute force or exfiltration. As with any scan, agree a window with system owners.
See it on your own systems.
A 30-minute demo on your targets, or install it yourself and start scanning this afternoon.